Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
File:                     7_vi0INCz7z3p9dOiOvQMeEgItk.mft (raw, json)
Hash identifier:          DlcC9lvM0vOYDqv5HRSBCmg9WHPwoyDNRBVSHklTjjE=
Subject key identifier:   4C:F7:F9:79:BE:91:44:7F:20:8A:21:03:0F:45:5C:18:46:3F:92:89
Authority key identifier: EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
Certificate issuer:       /CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Certificate serial:       01974B1F67E1831E6530FAA4A664CCD064A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
Manifest number:          0372
Signing time:             Sat 07 Jun 2025 16:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:38 +0000
Files and hashes:         1: 7_vi0INCz7z3p9dOiOvQMeEgItk.crl (hash: kdXcM123oQBbg+N32EbV71NLmj90G6vnyzmvdftYVZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:67:e1:83:1e:65:30:fa:a4:a6:64:cc:d0:64:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
        Validity
            Not Before: Jun  7 16:00:38 2025 GMT
            Not After : Jun  8 16:00:38 2025 GMT
        Subject: CN=4cf7f979be91447f208a21030f455c18463f9289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4b:80:07:aa:99:7c:db:64:e1:c5:f3:4f:fa:
                    85:76:7e:67:db:cf:6b:79:4b:0f:a0:4d:5e:9e:a5:
                    93:31:91:0a:5f:d5:88:1f:a3:44:6a:c2:b0:a8:cd:
                    9e:e6:ab:4f:63:8c:64:c6:f6:9d:54:80:1c:33:d5:
                    15:d8:72:bd:e9:81:50:2d:37:0c:1c:a3:eb:9e:c0:
                    54:7a:89:80:a5:ba:2a:3c:24:de:17:2d:c9:82:e3:
                    6b:53:42:92:96:14:a0:f5:3e:0d:86:18:0c:a7:5d:
                    12:1a:c4:b4:a9:9f:35:a5:82:fe:f6:0c:fe:69:2d:
                    31:39:e0:98:1f:27:42:f8:2d:8a:7c:70:05:61:76:
                    b5:be:2d:ce:b0:a3:8a:ab:84:ca:f7:0c:0d:03:f5:
                    1b:f3:e5:6d:74:f9:8b:01:9f:79:50:61:f3:6b:92:
                    13:6b:99:71:0b:1a:29:4b:ab:b9:f5:bf:59:7e:e1:
                    15:50:6b:5d:57:6c:d0:84:e2:21:9a:54:cd:70:ac:
                    0e:69:21:4b:a8:7c:00:63:13:e9:41:e3:15:45:56:
                    3f:11:0e:93:91:21:c0:21:09:ac:f5:36:bf:e3:a2:
                    2d:4c:33:33:10:94:2d:67:8f:a4:2f:65:68:b1:1a:
                    96:ec:e7:d1:ed:3d:71:13:5f:b2:22:c3:45:20:85:
                    6b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F7:F9:79:BE:91:44:7F:20:8A:21:03:0F:45:5C:18:46:3F:92:89
            X509v3 Authority Key Identifier:
                keyid:EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9b:41:9b:1e:73:51:5c:72:bd:a8:7d:3f:39:12:a8:ad:68:
         f7:27:4f:8b:6b:34:5f:e7:48:6f:9e:59:2c:be:29:4c:53:70:
         a3:81:e2:26:85:f5:82:0d:c8:2a:ad:57:d7:af:98:cf:2e:5c:
         9b:d7:53:11:4c:9c:91:78:8b:3a:68:68:e4:2e:70:be:53:60:
         b1:c2:00:d1:b3:3c:d5:ea:8d:95:72:97:50:d6:b4:10:55:b0:
         0e:60:d6:be:3c:74:e5:d1:4f:98:44:d2:3d:98:ab:5f:50:fc:
         0a:7f:18:50:48:f7:15:41:f3:2e:b3:fe:5d:b0:53:23:3c:da:
         03:91:4a:3b:17:e1:3e:ec:6b:36:30:7e:60:b0:a6:18:40:72:
         d7:2e:d8:93:c4:dd:43:78:3b:71:55:5a:4c:78:ba:a9:b0:bb:
         d3:25:63:a2:1a:95:a0:99:16:08:6f:c5:f5:15:90:dc:fb:52:
         e9:89:ac:47:26:ac:e2:2b:78:73:29:1b:ae:6a:69:5f:7d:f1:
         f1:f8:af:f9:2f:6c:71:78:41:fa:1a:86:d9:e4:4f:fe:fd:4b:
         4f:ad:d2:c8:f2:f2:7f:67:4e:75:10:2c:f8:b8:48:ae:64:ee:
         11:d1:df:80:51:db:7c:07:60:c9:9a:bf:7e:4d:35:00:8e:b3:
         20:1b:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:31:08 2025 by rpki-client